Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
File:                     7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft (raw, json)
Hash identifier:          Wx36p+ewgp1F3bBQgOUw15hJ5S4ahmctRVfhOwFiivU=
Subject key identifier:   86:7B:41:16:4A:71:D9:6A:0E:2F:6C:AD:CD:71:02:26:E5:E4:06:D6
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Certificate issuer:       /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial:       019A4F2B51238ED615A88AD9BA48A01FBD0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
Manifest number:          14B0
Signing time:             Tue 04 Nov 2025 14:00:29 +0000
Manifest this update:     Tue 04 Nov 2025 14:00:29 +0000
Manifest next update:     Wed 05 Nov 2025 14:00:29 +0000
Files and hashes:         1: 7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl (hash: x10u6lAODjhGbcJAA6FCy7GHfXLJ+1DxI5zE5lQmO8o=)
                          2: 87P_Ci_iU70ncygI7CnpcT0_t3U.roa (hash: Dx/6MtnsELNcfT3Kd/IAvBHzZJiX4ArB2AnOrW867fY=)
                          3: BVScilCB5AVz4BdoAZN-XzcZq3M.roa (hash: Oi7kCEaMjqNz1/ABo7GXrFFSRxf0di49byHZnkWl/xY=)
                          4: RTkmkNiaF4qMZtlUnnCXs8j2Uz4.roa (hash: vl+4xCPXpGUni/jcI0T4WydcImVmhjMnOzOiGTD/SYU=)
                          5: peAC0jemS44LL9eAMtnnvfhl0QQ.roa (hash: M7HBy7+sXugALnAMwzpYlFnUldtIuCHef9Q+Yk5qLvo=)
                          6: tB98Odb5xySPuatQxtBYr1TkuKY.roa (hash: jqy1Pxj3jnhl57ZRWHAF9knEyjWAZ+BFSBls3RcvCpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:2b:51:23:8e:d6:15:a8:8a:d9:ba:48:a0:1f:bd:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
        Validity
            Not Before: Nov  4 14:00:29 2025 GMT
            Not After : Nov  5 14:00:29 2025 GMT
        Subject: CN=867b41164a71d96a0e2f6cadcd710226e5e406d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:22:d3:a7:96:f6:f6:db:b4:81:bd:3d:c3:df:
                    9a:50:18:51:5c:df:6b:9b:47:2e:86:6e:df:33:69:
                    e1:5d:5a:26:3e:4b:52:a5:b2:0d:5a:39:d1:42:e0:
                    d6:2b:14:72:ea:05:2d:91:ac:69:47:c7:ec:49:50:
                    ae:cb:03:a6:a2:85:53:6a:41:f4:93:6b:74:13:4d:
                    3c:8a:e0:78:7e:2c:37:dc:80:b7:eb:e1:b3:99:5c:
                    24:17:3b:ae:a7:f8:40:e8:0b:08:e9:75:b1:cf:9c:
                    49:ac:9a:8e:0a:8b:9e:dd:37:1d:5d:ff:62:76:3e:
                    cb:f5:2c:fb:b4:92:4b:4d:38:01:55:d5:d6:7b:af:
                    35:43:b3:df:97:3b:61:92:27:ce:da:c7:c2:af:77:
                    b6:86:0b:89:8e:33:14:98:94:ba:fe:5d:95:c5:44:
                    e7:ec:b8:91:24:7c:93:ce:74:c1:a3:92:f5:d8:9d:
                    11:ba:cc:bd:59:06:1b:45:a7:c3:d1:1f:b1:85:8e:
                    3b:1b:da:aa:25:a3:c2:33:48:64:65:27:ed:32:5e:
                    8f:c4:d6:e5:e8:0e:d4:ae:f5:c4:56:a4:52:bf:9d:
                    6b:17:18:b4:92:9c:41:f3:3d:6f:f2:c0:3d:62:31:
                    31:af:98:60:88:52:3b:96:c3:98:21:6f:8b:fa:8d:
                    94:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7B:41:16:4A:71:D9:6A:0E:2F:6C:AD:CD:71:02:26:E5:E4:06:D6
            X509v3 Authority Key Identifier:
                keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e9:48:1a:17:84:e4:9c:bc:6a:0e:61:c1:e3:3f:ed:a4:ac:
         04:2e:fe:26:27:88:05:bb:cb:58:90:57:cf:db:8c:59:c6:b8:
         69:cd:03:2d:76:c0:3c:52:b1:31:ea:7b:30:d3:6c:ee:7b:16:
         8d:ed:64:09:cf:ce:22:1a:ce:1f:fa:39:15:66:10:49:e1:39:
         01:f5:60:20:fa:97:0b:10:f9:6a:1a:d1:ec:40:d7:6c:8b:46:
         77:49:01:2b:01:0c:e5:9b:7d:87:b2:5a:ad:ee:b2:9a:0c:bc:
         79:1e:9f:82:2e:69:e9:ad:f8:28:5f:80:72:1f:f6:39:be:26:
         db:de:b5:68:a2:eb:c5:45:37:4d:cc:3f:bc:70:ae:48:43:f0:
         28:73:c2:78:b2:b4:9e:44:27:4c:c5:4f:5a:a8:b0:8a:12:25:
         61:d9:89:2c:99:8c:d4:4a:af:79:7c:ce:13:ba:f5:a8:d8:eb:
         24:db:9c:3d:61:78:16:b5:c3:37:04:f4:c2:73:9c:78:28:11:
         f5:52:81:04:18:f3:57:d5:29:3c:b6:93:2b:ae:50:b7:e1:21:
         25:96:ed:d8:7a:9e:1d:07:cf:6a:08:5b:6a:ff:7e:00:f7:fd:
         53:6b:12:a6:ad:56:92:86:37:62:b4:70:a6:d0:e6:7d:12:1a:
         d8:13:62:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK1EjjtYVqIrZukigH70MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYmE3NzRiYTgyZmIwNDI3Zjc2NmU3ODNlNzcwZjRiZDk2
NDE2ZjkwHhcNMjUxMTA0MTQwMDI5WhcNMjUxMTA1MTQwMDI5WjAzMTEwLwYDVQQD
Eyg4NjdiNDExNjRhNzFkOTZhMGUyZjZjYWRjZDcxMDIyNmU1ZTQwNmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CLTp5b29tu0gb09w9+aUBhRXN9r
m0cuhm7fM2nhXVomPktSpbINWjnRQuDWKxRy6gUtkaxpR8fsSVCuywOmooVTakH0
k2t0E008iuB4fiw33IC36+GzmVwkFzuup/hA6AsI6XWxz5xJrJqOCoue3TcdXf9i
dj7L9Sz7tJJLTTgBVdXWe681Q7PflzthkifO2sfCr3e2hguJjjMUmJS6/l2VxUTn
7LiRJHyTznTBo5L12J0Rusy9WQYbRafD0R+xhY47G9qqJaPCM0hkZSftMl6PxNbl
6A7UrvXEVqRSv51rFxi0kpxB8z1v8sA9YjExr5hgiFI7lsOYIW+L+o2UyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZ7QRZKcdlqDi9src1xAibl5AbWMB8GA1UdIwQY
MBaAFOy6d0uoL7BCf3ZueD53D0vZZBb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0xwM1M2Z3ZzRUpfZG01NFBuY1BTOWxrRnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84MTBjMTEtYTEwNS00ZGIxLWE2YjUt
MzkyYjg2M2M5ZjAzLzEvN0xwM1M2Z3ZzRUpfZG01NFBuY1BTOWxrRnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi84MTBjMTEtYTEwNS00ZGIxLWE2YjUtMzkyYjg2M2M5ZjAz
LzEvN0xwM1M2Z3ZzRUpfZG01NFBuY1BTOWxrRnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOlIGheE
5Jy8ag5hweM/7aSsBC7+JieIBbvLWJBXz9uMWca4ac0DLXbAPFKxMep7MNNs7nsW
je1kCc/OIhrOH/o5FWYQSeE5AfVgIPqXCxD5ahrR7EDXbItGd0kBKwEM5Zt9h7Ja
re6ymgy8eR6fgi5p6a34KF+Ach/2Ob4m2961aKLrxUU3Tcw/vHCuSEPwKHPCeLK0
nkQnTMVPWqiwihIlYdmJLJmM1EqveXzOE7r1qNjrJNucPWF4FrXDNwT0wnOceCgR
9VKBBBjzV9UpPLaTK65Qt+EhJZbt2HqeHQfPaghbav9+APf9U2sSpq1WkoY3YrRw
ptDmfRIa2BNi8g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:37 2025 by rpki-client